CVE-2024-3766

A vulnerability, which was classified as problematic, has been found in slowlyo OwlAdmin up to 3.5.7. Affected by this issue is some unknown functionality of the file /admin-api/uploadimage of the component Image File Upload. The manipulation of the argument file leads to cross site scripting. Th...

CVE-2024-3766 slowlyo OwlAdmin Image File Upload upload_image cross site scripting

A vulnerability, which was classified as problematic, has been found in slowlyo OwlAdmin up to 3.5.7. Affected by this issue is some unknown functionality of the file /admin-api/uploadimage of the component Image File Upload. The manipulation of the argument file leads to cross site scripting. Th...

CVE-2024-3766

CVE-2024-3766 affects slowlyo OwlAdmin up to version 3.5.7. The issue resides in the Image File Upload component, specifically the /admin-api/upload_image path, where manipulation of the file argument enables cross-site scripting. The vulnerability can be triggered remotely, an exploit has been d...